General
- Target ENQUIRY - E602.JS.js
- Size 4.0MB
- Sample260813-hdps5sswfz
- SHA256 e19b0832f7f3b77fb7b3ddacd1da8cfaf1e64970e8f8505e35026ac48e62f730
- MD5 996ed4cf17253c182c7ad6b01f7c3970
- SHA1 7fe3799b9ec493f069cb7fb19a7140f9bfd63230
- SHA512 80b8ffda2bd2e8750a74d1563a9876bb3e2fd2b872ef98fa4ef83f20732069056dbe1abe130e02e73b45d1441701b9838d2b9a6b471aa7952592788a8f0e7226
- SSDEEP 98304:IlaiEcKsTs4p8Y141EoHlJMPPMJ9RtpmZgEnAYQoOK43YRcUjvNtivjJwqLKS8:6aDMbpj14aoHz8+tpmCEnASU3YR6JkS8
- TLSH T17816F751938498327B25A77E85B6DB30A61A628760F6CF44346CD308BBACD275B4CFD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
ENQUIRY - E602.JS.js
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
ENQUIRY - E602.JS.js
Resource
win11ltsc2024-20260710-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target ENQUIRY - E602.JS.js
- Size 4.0MB
- SHA256 e19b0832f7f3b77fb7b3ddacd1da8cfaf1e64970e8f8505e35026ac48e62f730
- MD5 996ed4cf17253c182c7ad6b01f7c3970
- SHA1 7fe3799b9ec493f069cb7fb19a7140f9bfd63230
- SHA512 80b8ffda2bd2e8750a74d1563a9876bb3e2fd2b872ef98fa4ef83f20732069056dbe1abe130e02e73b45d1441701b9838d2b9a6b471aa7952592788a8f0e7226
- SSDEEP 98304:IlaiEcKsTs4p8Y141EoHlJMPPMJ9RtpmZgEnAYQoOK43YRcUjvNtivjJwqLKS8:6aDMbpj14aoHz8+tpmCEnASU3YR6JkS8
- TLSH T17816F751938498327B25A77E85B6DB30A61A628760F6CF44346CD308BBACD275B4CFD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger